@Evgeny Belenky, I found Stellar to be quite intriguing.
I would also recommend McAFee’s new console for centralizing and coordinating a well-deployed enterprise solution.
I found QRadar as a very workable SIEM. It also works seamlessly with the IBM SOAR solution
Integrating with the right EDR makes it a formidable solution for monitoring the health of your environment, and offers potential responses to mitigate threats.
There is a trade-off…
For tools I’d recommend:
-SIEM- LogRhythm
-SOAR- Palo Alto XSOAR
Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic
Also, remember that any EDR/XDR should integrate to the SIEM/SOAR and a strong threat…
